eole-syspass/dicos/51_syspass.xml

<?xml version="1.0" encoding="utf-8"?>
<creole>
    <files>
        <!-- service de sauvegarde Bacula -->
        <file filelist='syspass-bacula' name='/etc/bacula/baculafichiers.d/syspass.conf' source='syspass-bacula.conf' rm='True'/>
	<file filelist='syspass_files' name='/etc/eole/eole-db.d/syspass.yml' rm='True' mkdir='True'/>
    </files>
    <containers>
        <container name='web'>
            <package>eole-syspass-pkg</package>
            <!-- service de configuration apache -->
            <service method="apache" servicelist="syspass">syspass</service>
            <!-- fichiers de conf apache -->
            <file filelist='syspass_files' name='/etc/apache2/sites-available/syspass' source='syspass-apache.conf' />
        </container>
    </containers>
    <variables>
        <family name='applications web'>
            <variable name='activer_syspass' type='oui/non' description='Activer sysPass'>
                <value>oui</value>
            </variable>
            <variable name='syspass_allowed_ip' type='ip' description="IP autorisée à se connecter" mandatory='True' multi='True'/>
            <variable name='syspass_allowed_netmask' type='netmask' description="masque du sous-réseau autorisé à se connecter" mandatory='True'/>
            <variable name='syspass_db_mode' type='string' description="Mode de fonctionnement de la base de données"  mode='expert' mandatory='True'>
                <value>default</value>
            </variable>
            <variable name='syspass_db_host' type='string' description="Adresse de la base de données" mode='expert' mandatory='True'/>
            <variable name='syspass_db_port' type='number' description="Port de la base de données" mode='expert' mandatory='True'/>
            <variable name='syspass_db_root' type='string' description="Compte d'adminstration de la base de données" mode='expert' mandatory='True'/>
            <variable name='syspass_db_root_passwd_path' type='filename' description="Chemin du fichier de mot de passe pour l'administration de la base de données" mode='expert' mandatory='True'/>
            <variable name='syspass_db_extra_allowed_hosts' type='string' description="Hôtes supplémentaires autorisés à se connecter à la base de données" mode='expert' multi='True' mandatory='True'/>
        </family>
    </variables>
    <constraints>
        <condition name='hidden_if_in' source='activer_apache'>
            <param>non</param>
            <target type='filelist'>syspass_files</target>
            <target type='servicelist'>syspass</target>
        </condition>
        <condition name='hidden_if_in' source='activer_syspass'>
            <param>non</param>
            <target type='filelist'>syspass_files</target>
            <target type='servicelist'>syspass</target>
        </condition>
        <condition name='disabled_if_in' source='syspass_db_mode'>
            <param>default</param>
            <target type='variable'>syspass_db_host</target>
            <target type='variable'>syspass_db_port</target>
            <target type='variable'>syspass_db_root</target>
            <target type='variable'>syspass_db_root_passwd_path</target>
            <target type='variable'>syspass_db_extra_allowed_hosts</target>
        </condition>
        <condition name='disabled_if_in' source='syspass_db_mode'>
            <param>local</param>
            <target type='variable'>syspass_db_port</target>
            <target type='variable'>syspass_db_root</target>
            <target type='variable'>syspass_db_root_passwd_path</target>
            <target type='variable'>syspass_db_extra_allowed_hosts</target>
        </condition>
        <condition name='hidden_if_in' source='activer_bacula_dir' fallback='True'>
            <param>non</param>
            <target type='filelist'>syspass-bacula</target>    
        </condition>
        <group master='syspass_allowed_ip'>
            <slave>syspass_allowed_netmask</slave>
        </group>
    </constraints>
    <help>
        <variable name='activer_syspass'>sysPass est un coffre-fort de secrets multi-utilisateurs codé en PHP et JavaScript.</variable>
    </help>
</creole>